osint
Passive OSINT reconnaissance on domains, IPs, organizations
Installation
Follow the repository instructions for this skill and your agent. Review the files and dependencies before adding it to your workflow.
View source ↗GuidesSkill instructions
OSINT Reconnaissance
Passive intelligence gathering:
- Domain WHOIS and DNS records
- Subdomain enumeration
- IP geolocation and ASN lookup
- Certificate transparency
- Email format discovery
- GitHub/code leak search
- Social media reconnaissance
Required Context
- Target: Domain, IP, organization, or individual
- Scope: What to focus on (infra, emails, leaks)
- Output: Format preference
Tools Used
whois, dig, subfinder, amass, shodan, geoiplookup, theHarvester, crt.sh
Example
/osint
Target: example.com
Focus: Infrastructure mapping, email format
Examples
Read the usage examples in the source repository.
View source ↗Source history
- Indexed on
- 2026-03-11
- Index updated
- 2026-03-11
- Branch
- main
Index and sync dates describe this directory. View the source repository for code history.
GitHub ↗chat Comments (0)
Sign in to join the discussion and leave a comment.
No comments yet. Be the first to share your thoughts!